Information Security - Technical Professional

The Work We Do

Teciem designs, builds, and delivers treasury and capital markets software solutions for financial institutions worldwide. We serve banks of every size and geography, offering the right setup for the right need.

Our solutions are designed to replace multiple disconnected systems with one complete, front-to-back platform, helping customers to capture trading and business opportunities quickly, clearly and with control. We cover the entire trading lifecycle, ensuring that everything - from execution to position keeping, to risk management – runs smoothly.

With decades of experience and one of the largest, most diverse client bases in the industry, we turn deep industry knowledge into software that covers most asset classes, meets complex real-world treasury and capital market's needs, and adapts as markets evolve.




We are seeking an experienced Information Security Engineer with a strong background in secure software development practices, application security testing, vulnerability management and Information Security Compliances. The ideal candidate will be responsible for ensuring that security is integrated across the software development lifecycle (SDLC) and will actively collaborate with development, DevOps, and product teams to mitigate application-level risks.

Responsibilities:

• Application Security

• Perform comprehensive application security assessments, including Static Application Security Testing (SAST) Pen testing, Dynamic Application Security Testing (DAST), and API security testing across enterprise applications.

• Review and analyse source code to identify and remediate security vulnerabilities.

• Collaborate with development teams to integrate security best practices in the SDLC and provide secure coding guidance.

• Lead and support remediation efforts by providing actionable recommendations and retesting fixes.

• Conduct manual and automated web application and API penetration tests to uncover business logic and security flaws.

• Develop and maintain security testing checklists, processes, and internal documentation.

• Track and report vulnerabilities, ensuring timely closure in collaboration with development and product owners.

• Participate in threat modelling sessions and help teams prioritize risks based on severity and business impact.

• Stay current with emerging threats, vulnerabilities, attack vectors, and security technologies to proactively improve application security posture.

• undefined

• Information Security Compliance:

• Ensure compliance with relevant security standards and regulations, including ISO 27001, NIST Standard regarding Devsecops

• Develop and maintain security documentation and procedures.

• Assist with external security audits and assessments.

• Stay up to date on the latest security threats and vulnerabilities.

  Other Duties:

• Provide security consulting and support to other teams.

• Evaluate and recommend new security technologies and solutions.

• Participate in security awareness training and initiatives.

• Understanding of Technology & Security Risk Management and Vendor Risk Management Framework

• undefinedTechnical Skills and Capabilities (Primary – Must Have):2-3 years’ experience working in IT Security in multiple capacities.Hands-on experience with application security tools such as Burp Suite, IBM AppScan, Acunetix, HP WebInspect, NTOSpider, Postman, checkmarx and others.Strong expertise in manual and automated web application security testing and a deep understanding of OWASP Top 10 and business logic vulnerabilities.Solid experience testing RESTful and SOAP APIs, analyzing request/response flows, and validating secure implementation.Strong knowledge of secure coding principles, common attack vectors (OWASP, SANS Top 25, WASC), and mitigation techniques.Familiarity with CI/CD pipelines and integrating security testing into DevOps workflows (preferred).Proficiency in both Black Box and White Box testing methodologies.Certifications (Preferred):Certified Ethical Hacker (CEH), OSCP, eWPT, or equivalent security certifications are preferred.Certification like ISO 27001, CISM etc. would be an added advantage.




Diverse Minds, Shared Ambition

At Teciem, we believe that our strength comes from the diversity of our people. Different perspectives, backgrounds, and experiences fuel our innovation and help us build solutions that truly make a difference in the world of financial technology.

We’re committed to creating a workplace where everyone feels respected, heard, and empowered to grow. Here, you can bring your whole self to work, contribute your unique ideas, and be part of a team driven by shared ambition.

We welcome talent from all walks of life and encourage applications from individuals of all genders, races, ages, abilities, identities, and beliefs. Together, we’re shaping a culture where diversity isn’t just celebrated — it’s essential to our success.